CVE-2014-3010: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-5019

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.2, 6.3 through 6.3.0.5, 7.0 through 7.0.0.5, 7.5 through 7.5.0.4, 8.0 through 8.0.0.2 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote attackers to...

CVE-2013-6721: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets...

PT-2013-6100

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.x through 8.0.0.2 Description A cross-site scripting XSS issue allows remote authenticated users to...

IBM WebSphere Service Registry和Repository HTML注入漏洞

Bugtraq ID:64301 CVE ID:CVE-2013-6721 IBM WebSphere Service Registry and Repository是一款使用户能够发布、查找、扩充、管理和治理SOA中服务的工具。 相关WSRR工具的输入在使用之前缺少正确过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 IBM WebSphere Service Registry and Repository 7.5 IBM WebSphere Service Registry and Repository 7.5.0.1 I...

PT-2011-3082

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3 through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0 through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5 through 7.5.0.1...

CVE-2011-1357: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

PT-2010-4166

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR version 7.0.0 before FP1 Description The issue is related to improper access control implementation, allowing remote attackers to perform governance actions. This is achieved via unspecified A...

CVE-2010-2644: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface...

CVE-2010-2985: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the searchTerm parameter to ServiceRegistry/HelpSearch.do or 2 the queryItems0.value parameter to...

CVE-2009-2750: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access via a property query...